vectordb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md’s RAG implementation, the workflow performs vector_store.search and then injects retrieved doc.content and the user-supplied question directly into the generated prompt, so outsider-authored free text present in the vector store can be consumed without selecting a specific trusted item first.